Validation rule for edit the case for specific Profile

Question

I need help with my Validation Rule. In my scenario, I have one Custom Object and in the Custom Object, I have one "Record Owner" Field which is lookup through the User Object. I want only that user edit that record which is assigned to him and that record "Read Only" for others. Also, I have Some Profiles, Those Profiles have access to all the records which is assigned or not. Here's my Validation Rule:-

IF(
    OR(
        CONTAINS( $User.ProfileId , 'ID'),
        CONTAINS( $User.ProfileId , 'ID'), 
        CONTAINS( $User.ProfileId , 'ID'),
        CONTAINS(  Record_Owner__r.Alias ,  $User.Alias )
    ), 
    false, 
    true
)

From this Validation Rule, I got the error when the other Profile User trying to update that Record which has access for all the Records.

Thank you in advance

Answer 1

You should be using a Custom Permission. Your validation could then look like:

Not(Or($Permission.EditObjectXRecords, $User.Id = OwnerId))

Alternately, consider setting your Organization Wife Defaults to Read Only, then assign the Modify All Data (Object X) permission to the profiles or a Permission Set.

Answer 2

There is a standard field for record owner that you can use. If I understand correctly, you want only the record owner to be able to edit the record. In that case, your Error Condition Formula would be simply

$User.Id  <>  OwnerId

To include Profiles, consider the solution from @sfdcfox. It means that you do not need to consider changes to Profile name, or different Ids in each sandbox for a new Profile until it is refreshed from Production.

If you choose not to, go to the Profile(s) that should be able to edit the record and get the Id of the Profile. Include them in the formula like this:

AND (
    $User.Id  <>  OwnerId,
    $Profile.Id <> '00e30000001Ja3e',
    $Profile.Id <> '00e30000001Gs8e',
    $Profile.Id <> '00e30000001aFo2'
)

Using Profile Id is safer than using the name of the Profile since the name can be edited. If the Profiles that you want to include were already in Production when your sandbox was created, the Profile Id will be the same as it is in Production, so no need to modify the VR in each sandbox.